uw-unity-feature-scaffold
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a local file to drive logic and file creation.
- Ingestion points: Reads docs/ProjectConfig.yaml for project name, folder strategy, and architecture patterns.
- Boundary markers: No explicit delimiters or warnings are present to treat the configuration file content as untrusted data.
- Capability inventory: Performs file and directory creation within the Assets/_Project/ directory and invokes the refresh_unity command.
- Sanitization: Employs PascalCase conversion for deriving namespaces from the project name, which provides some structural validation of the input data.
Audit Metadata